Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211440.roa
File: AS211440.roa (raw, json)
Hash identifier: EOcM62HTxB3HA3+fC6sq5yQuLz8TjK5SlE9vWSX2RRw=
Subject key identifier: 70:71:C3:1D:B0:C5:45:65:88:10:CB:42:7D:B5:27:14:DA:56:76:80
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 208E2FA2C046D937189AC2D5070649A1CE9CCCB0
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211440.roa
Signing time: Tue 22 Apr 2025 00:54:03 +0000
ROA not before: Tue 22 Apr 2025 00:49:03 +0000
ROA not after: Tue 21 Apr 2026 00:54:03 +0000
asID: 211440
IP address blocks: 45.146.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 12:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8e:2f:a2:c0:46:d9:37:18:9a:c2:d5:07:06:49:a1:ce:9c:cc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 22 00:49:03 2025 GMT
Not After : Apr 21 00:54:03 2026 GMT
Subject: CN=7071C31DB0C545658810CB427DB52714DA567680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:f2:b1:e4:d7:38:e6:aa:4c:9a:a6:ec:80:
80:81:89:a2:67:76:ce:10:17:44:7d:81:29:d7:01:
dc:b4:0f:a5:76:e7:a9:67:01:aa:84:88:71:00:7b:
e1:d0:b9:68:66:6b:b5:7b:68:0d:9d:9c:78:e8:84:
3a:d2:c8:70:8b:8b:b0:a8:3b:ed:f0:f2:f3:13:ed:
dc:de:a8:b1:eb:2a:3e:69:94:24:44:6a:f1:ce:fb:
d2:4b:b9:44:8a:04:79:a9:e3:b3:b6:22:3f:d4:03:
a1:00:d4:f6:73:12:65:ee:fd:cf:4d:a0:d2:f6:2b:
14:5a:26:a0:99:c3:54:49:e3:4a:50:e7:8c:ff:7c:
52:07:ad:90:6e:77:ff:4e:04:d4:0e:ce:39:ef:25:
c3:26:d7:67:21:37:2e:20:46:05:48:71:8a:c1:ca:
22:fc:72:5a:74:53:f0:60:13:be:e7:24:bb:99:4d:
b3:75:03:f9:1a:55:99:0d:05:c4:8d:9c:45:4c:f8:
f2:19:37:7b:16:b0:80:7b:10:2b:9e:db:f2:3c:bb:
50:36:9c:a7:da:c0:86:bb:8e:bf:36:12:d4:ad:d4:
bb:72:00:5c:00:37:89:ca:ff:c2:ac:70:b8:f4:c2:
6b:a8:51:3b:0f:18:f0:ba:f0:93:46:e6:f1:0a:8b:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:C3:1D:B0:C5:45:65:88:10:CB:42:7D:B5:27:14:DA:56:76:80
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.83.0/24
Signature Algorithm: sha256WithRSAEncryption
81:96:df:65:86:ea:22:e7:1d:68:6e:a0:1d:e1:c4:41:62:a1:
03:69:a0:e3:e2:1e:57:af:d7:e2:93:03:d3:f0:0f:78:aa:51:
52:69:51:0d:73:e0:93:c2:95:66:e7:f9:c5:ca:c6:ad:3e:7c:
ae:40:ec:bb:e2:cd:26:1c:fe:86:6e:44:0f:2d:27:a8:0f:12:
0d:83:bc:a6:f8:06:6d:68:16:0a:51:cc:f4:72:99:1b:7e:e7:
b1:12:21:cc:b2:b0:b9:1c:40:bf:28:21:7c:6f:1b:b2:0e:63:
36:98:38:d2:7f:df:cc:4d:0f:1d:59:e3:0c:88:44:8c:80:e6:
4a:01:42:f7:db:2a:42:9b:1a:cd:d8:32:19:94:1d:68:1f:dc:
4b:bf:57:32:f6:61:67:7e:6e:ea:eb:da:8d:68:a3:de:8e:30:
05:20:a5:7c:4f:41:7d:85:3a:86:96:67:d6:c8:35:5e:58:bb:
74:da:c3:08:04:7b:01:7b:60:ba:14:7b:72:58:c6:9f:1d:37:
8d:30:0c:cb:c9:ef:45:ed:50:3b:ef:63:e9:34:02:e4:32:fc:
5b:cf:3d:b0:4f:5f:12:88:06:1f:09:c5:a1:c0:25:54:b5:a2:
69:d3:30:a5:c0:ee:4d:90:a9:a4:ae:67:73:9f:79:7f:ff:70:
01:4c:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:28:12 2025 by rpki-client